I think it seems strange where we imagine that tools are neutral. But they aren't, necessarily, and especially if the organization/developers knew they were building something to be used unlawfully, it's reasonable to hold them accountable.

Taxi rides are generally neutral, too, but if someone hops into your taxi, asks you to drive to the bank and wait, and tells you outright that they're going to rob the place, that makes you a getaway driver with a taxi, not a taxi driver who happens to have a guilty client.